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PREFACE 

This  paper  describes  the  BAM  Machine-Based  Document  Control  System  used 
by  the  System  Development  Corporation,  Santa  Monica,  California,  to  control 
internally  generated  accountable  classified  documents.  (A  modified  version 
is  used  to  control  documents  and  publications  from  external  sources. )  This 
system  encompasses  five  oxeas  of  control:  (l)  copies  in  file;  (2)  copies 
en-route  to  an  employee.;  (3)  copies  issued  within  the  facility;  (4)  copies 
transmitted  from  the  facility;  and  (.5)  copies  destroyed,  The  system  was 
officially  installed  on  July  1,  I961  and  has  effectively  established  and 
maintained  control  of  over  130,000  docimient  copies  printed  since  that  time. 
In  addition,  distribution  data  for  more  them  450,000  Secret  copies  printed 
prior  to  July  1,  I96I  has  been  converted  from  manual  records  to  the  new 
machine -based  system.. 

Appreciation  is  extended  to  Richard  L.  Wilson,  Edmund  A.  Green,  and 
William  D.  Wilson  who  assisted  in  the  programming  and  implementation  of  the 
Machine-Based  Docment  Control  System.  Much  of  their  personal  time  was 
given  without  thought  of  remvineratlon  and  at  great  inconvenience  on  a  number 
of  occasions.  Also  deserving  of  mention  are  all  members  of  the  Document 
Distribution  Section  who  worked  so  diligently  and  faithfully  to  convert 
manual  records  to  tabulating  cards  and  implement  the  new  system  without 
diminishing  service  to  the  "customer." 


IT  September  I962 


3 


SP-961 


IKTBODUCTIOM 

Early  in  I961  SDC  recognized  a  need  for  Improved  systematic  control 
and  inventory  of  its  Secret  document  holdings.  At  that  time  distribution 
and  destruction  records  for  over  650,000  Secret  document  copies  were  main¬ 
tained  on  5"  X  8"  Distribution  Record  Cards.  All  transmittal  receipts  and 
destruction  certificates  were  prepared  by  typewriter  and  the  information 
transferred  in  longhand  to  the  record  card.  Approximately  10,000  of  40,000 
receipts  in  file  were  prepared  by  typewriter  with  the  remaining  30,000  on 
tabulating  cards  as  a  result  of  an  automated  new  document  announcement  and 
order  system. 

We  began  looking  for  a  system  that  would  force  deliberate  actions  when 
recording  the  movement  of  a  document  copy;  a  system  that  required  the  pre¬ 
sence  of  both  the  record  and  the  document  copy  before  action  could  he  taken 
on  either  one.  Also,  we  needed  a  system  that  would  provide  maximum  control 
with  minimum  effort  and  expense  to  meet  the  requirements  of  the  Industrial 
Security  Manual  and  satisfy  security  inspection  teams  who  were  very  much 
interested  in  knowing  what  number  of  copies  of  Secret  documents  had  been 
printed  and  what  happened  to  each  one. 

The  Industrial  Security  Manual  (which  does  not  dictate  specific  Secret 
document  control  methods)  requires  the  contractor  to: 

1.  maintain  a  record  of  reproduction,  to  be  kept  for  k  years; 

2.  maintain  a  record  of  distribution,  to  be  kept  for  years; 

3.  maintain  a  record  of  destruction,  to  be  kept  for  k  years;  and 

k.  perform  automatic,  time-phased  downgrading  and  declassifica¬ 
tion  of  group  3  and  4  documents. 

With  this  in  mind,  we  proceeded  to  design  a  document  control  system  that 
would  satisfy  both  the  ISM  and  security  inspection  teams.  Here  is  a  descrip¬ 
tion  of  the  system  developed. 


SYSTEM  DESCRIPTION 


The  Machine-based  Docijment  Control  System  was  designed  to  record  dis¬ 
tribution  and  destruction  of  Secret  documents  by  using  tabulating  cards  in 
a  Record  Deck.  This  deck  consists  of  a  Master  Summary  card  recording  the 
total  number  of  accountable  copies  of  a  document,  and  a  Detail  Card  for 
each  individual  document  copy  number.  The  original  Detail  Card  is  used 
throughout  the  life  of  the  docximent  copy  it  represents  to  show  the  current 
location  as  Indicated  by  numeric  codes  punched  into  specified  fields  on  the 
card. 


The  numeric  codes  (see  Table  l)  are  sequenced  to  cover  98?^  of  work  flow 
and  degree  of  permanency  in  any  one  location.  For  example,  a  document  copy 
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may  in-ocood  rroni  i'.Llo  (llTN)  to  icauc  on  n  htnid- receipt  (code  2)  or  tranc- 
mittoJ  I'rom  the  i'acility  (code  3)  and  then  subsequently  go  to  destruction 
(code  4).  Uoldom  (lees  than  r’p  of  the  time)  does  a  document  copy  return  to 
the  facility,  and  it  will  never  return  to  life  after  destruction. 


TABLE  I  DOCES-UiNT  LOCATION  CODES 

BIN 

CODE  1 

CODE  2 

CODE  3 

CODE  4 

Unissued 

copies 

In  transit 
to  employees 
within  the 
facility 

Issued  to 
employees 
within  the 
facility 

Transmitted 
from  the 
facility  via 
registered  moil 

Destroyed 

VERIFICATION 

Copy  on 
file  in 
vault 

In  possession 
of  mailroom 
messenger 

Signed  hand- 
receipt  in 
file 

Transmittal 
receipt  in 
file  signed 
by  recipient 

Certificate 

of 

destruction 
on  file 

ESTABLISHING  TJffi  RECORD 

Four  tabulating  cord  formats  are  used  to  establish  and  maintain  account¬ 
ability  of  Secret  materialj  a  Master  Summary,  a  Detail  Card,  a  Hand-Receipt 
card,  and  an  Accountability  Transfer  Receipt  card.  Each  card  forniat  and  its 
use  is  described  below. 

Master  Summary  (Figure  l);  This  card  serves  as  the  base  record  for  all 
copies  of  a  particular  document.  It  identifies  the  Automatic,  Time-phased 
Downgrading  and  Declassification  System  group  niunber,  document  publication 
date,  document  series  and  number,  classification,  and  total  number  of  copies 
printed  (this  number  is  also  the  last  copy  number  assigned).  As  additional 
copies  ore  reprinted,  the  Master  Summary  i.B  corrected  to  reflect  the  new  copy 
count. 


Collectively,  the  Master  Sumniary  cards  may  be  used  to  prepare  group  3 
and  4  dovmgrading  and  declassification  guides  by  listing  the  document  series 
and  numbers  by  publication  date  within  group  assignment.  Also,  docume.nts 
produced  under  any  given  contract  may  be  selected  and  listed  on  a  print¬ 
out.  ' 


For  easy  access,  all  Master  Summary  cords  for  each  document  series  ore 
filed  in  the  front  of  the  drawer  containing  the  records  for  that  series. 

Detail  Card  (Figure  g) ;  A  Detail  Card  is  made  for  each  document  copy 
number.  It  is  used  to  record  the  current  location  of  the  copy  it  reijresents 
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from  BIN  through  codes  1,  2,  3,  and  4  (see  Table  l).  This  card  exists  for 
the  life  of  the  copy  unless  a  new  card  Is  made  to  reflect  a  person-to-person 
transfer  or  a  return  to  the  facility  for  refile  or  reissue  (from  code  3  to 
BIN  or  code  s).  In  these  cases,  only  new  current  location  data  are  punched 
into  the  card.  All  past  accountability  (employee  and  outgoing  control 
numbers)  are  entered  on  the  face  of  the  new  card  in  longhand,  and  the  old 
out-of-date  card  is  destroyed. 

Together,  the  Master  Summary  and  Detail  Cards  malce  the  Record  Deck 
(Figure  3). 

Hand-Receipt  (Figure  4):  The  hand-receipt  card  is  prepared  in  tripli¬ 
cate,  each  card  a  different  color  for  easy  visual  Identification  by  employees 
and  control  station  personnel.  One  copy  becomes  the  original  signed  receipt; 
the  second  is  signed  by  the  person  accepting  the  document  copy  in  the 
addressee's  absence,  and  the  third  is  held  by  the  person  accountable  for 
the  document  copy-  Only  the  first  and  third  copies  contain  the  addressee's 
name  and  employee  number;  the  second  is  keypunched  with  the  name  and  employee 
number  of  the  alternate  recipient. 

Accountability  Transfer  Receipt  (Figure  4);  These  are  available  in  all 
stockrooms  for  use  by  classified  document  holders  to  transfer  accountability 
to  another  cleared  employee.  Space  is  provided  on  the  face  of  the  card  for 
the  document  series  and  nmber,  publication  date,  copy  number,  name  and 
employee  munber  of  both  the  transferrer  and  transferee,  and  date  of  transfer. 

The  following  ceaxls  do  nob  actually  record  accomitabillty.  They  are 
used  to  help  reduce  the  size  of  the  active  card  files  and  assist  in  the 
control  station  Inventory. 

Destmctlon  Summary  (Figure  ^);  Prior  to  each  control  station  inventory 
all  code  4  detail  cards  are  listed  and  totaled  on  the  402  Electronic  Account¬ 
ing  Machine.  A  Destruction  Summary  is  keypunched  and  placed  in  the  Record 
Deck  replacing  the  individual  code  4  cards  which  ore  placed  in  storage. 

Transmittal  Summary  (Figure  3):  The  Transmittal  Summary  card  for  code  3 
Detail  Cards  is  prepared  in  the  same  manner  as  the  Destruction  Summary  card. 
However,  care  must  be  taken  to  up-date  the  Transmittal  Summary  card  when 
docuiiiexit  copies  ar'c  returned  to  the  facility. 

EQUIPMENT 

An  almost  unlimited  type  and  quantity  of  FAM  and  EDPM  equipment  was 
available  at  SDG.  Yet,  to  use  this  equipment  meant  releasing  record  cat.'ds 
for  periods  of  time  ranging  from  a  few  minutes  to  several  hours.  During 
this  time  a  temporary  loss  of  control  would  exist  and  if  the  cards  were  lost, 
permanent  loss  of  control  could  have  resulted.  The  answer  was  a  "dLstri|ibutlon 
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data  proceseing"  office  housed  and  operated  within  the  Document  Control 
office  for  which  the  following  equipment  was  installed: 

Monthly  Rental 


1.  one  026  Keypunch  machine  $  6O.OO 

2.  one  056  Verifier  machine  50.00 

3.  one  082  Sorter  40.00 

4.  one  087  Collator  245.00 

5.  one  402  Electronic  Accounting  Machine  220.00 


Total  monthly  rental:  $615.00,  plus  accessories  and  tax. 

Needless  to  say,  this  equipment  is  not  used  exclusively  for  docviinent 
control;  nearly  80^  of  the  machine  time  is  devoted  to  a  duplication  and 
distribution  cost  accounting  system  that  is  not  connected  with  document 
control. 

Unskilled  control  station  personiiel  were  schooled  and  trained  in  the 
operation  of  this  equipment.  The  only  additional  personnel  added  to  the 
force  were  those  required  to  convert  the  massive  mnnual  records  to  the  new 
system.  Authorized  strength  will  once  again  be  reached  through  normal 
attrition. 


RECORDING  ACCOUNTABILITT 


Once  generated,  the  Record  Deck  remains  complete  at  all  times  except 
when  Detail  Cards  are  removed  for.  recording  current  location  (Table  l)  of 
the  document  copy.  Periodically  prepared  Destruction  and  Transmittal 
Summary  cards  maintain  a  complete  Record  Deck  of  workable  proportions  by 
replacing  the  individual  Detail  Cards  they  repiresent. 

Copies  in  File  (BIN);  Copies  in  the  vault  are  referred  to  ae  "BIN" 
copies  and  the  detail  card  Is  the  SIN  card.  No  location  code  is  entered  in 
the  Detail  Card.  It  remains  in  the  Record  Dock  until  removed  to  record 
movement  of  the  document  copy  into  codes  1,  2,  3,  or  4. 

Copies  in  Inter-Office  Mail  (Code  1);  When  a  document  copy  is  addressed 
to  an  employee  the  en^iloyee  number  (MN)  md  process  date  is  entered  in  pencil 
on  the  BIN  card,  punched  code  1,  and  placed  in  the  suspense  file  until 
either  the  signed  ha:id-receipt  card  or  refused  document  is  returned  to  the 
control  station.  Follow-up  is  accompli, shed  if  neither  has  been  received 
after  5  work-days. 

Hand-Receipt  in  File  (Code  2);  Upon  receipt  of  the  signed  hand-receipt 
card,  the  code  1  card  is  pulled  from  the  suspense  file,  and  code  2  and  the 
employee  number  are  punched  into  the  code  1  Detail  Card.  The  code  2  card 
then  returns  to  the  record  deck.  Upon  transfer  of  accountability  from  one 
person  to  another,  a  new  code  2  Detail  Card  is  punched  showing  the  current 
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holdere*  employee  number.  The  former  holder's  employee  number  is  entered 
in  longhand  on  the  face  of  the  new  card  and  it  is  retarned  to  Record  Deck. 

Transmittal  from  the  Facility  (Code  3)?  Kie  BUf  card  is  used  to  pre¬ 
pare  the  transmittal  receipt  for  material  being  sent  from  the  facility.  The 
transmltteil  is  preaddressed  according  to  the  initial,  distribution  list  or 
document  request,  assigned  an  outgoing  (OG)  control  number,  and  put  on  the 
402  Electronic  Accounting  Machine  for  listing  from  the  BIN  cards.  The  BIN 
cards  are  then  keypunched  to  show  the  address  code,  outgoing  control  number, 
process  date,  and  code  3  and  are  returned  to  the  Record  Deck. 

Destruction  (Code  4);  Destruction  certificates  are  produced  on  the 
402  Electronic  Accounting  Machine  using  Detail  Cards  representing  the  docu¬ 
ment  copies  to  be  destroyed.  The  listing  contains  the  document  publication 
date,  document  aeries  and  number,  and  copy  number.  After  listing,  code  4 
and  the  scheduled  destruction  date  are  punched  into  the  detail  card  and  the 
cards  are  rafiled  in  the  Record  Deck. 

Thus,  the  Record  Deck  is  complete  at  all  times  (except  for  code  1 
Detail  Cards  in  temporary  suspense)  and  verification  of  the  completeness 
of  the  record  can  be  made  at  any  time. 

INVENTORY 


SDC's  policy  is  to  conduct  a  perpetual  inventory  of  copies  on  file  in 
the  control  station  and  copies  issued  to  employees  within  the  facility. 

Each  inventory  is  scheduled  for  completion  within  a  .six-month  period.  This 
enables  the  control  station  to  Inventory  its  holdings  and  those  copies  held 
by  employees  twice  a  year. 

Personal  Inventory;  A  machine  listing  (Figure  6),  prepared  by  the 
control  station  from  the  hand-receipt  cards  on  file  for  each  employee  charged 
with  Secret  documents,  is  furnished  to  the  employee  with  Instructions  to  check 
the  contents  of  his  safe-file  and  physically  sight  each  item  listed,  indicate 
items  listed  but  not  sighted,  and  add  to  the  list  all  items  in  his  possession 
but  not  shown. 

Upon  return  of  the  listing  to  the  control  station,  each  discrepancy  is 
checked,  correct  accountability  is  determined  for  added  items,  and  searches 
made  to  account  for  unsighted  items.  Because  the  inventory  is  on  an  ongoing 
basis,  these  discrepancies  come  to  light  one  at  a  time,  and  so  resolution 
of  eioch  one  can  be  performed  in  an.  orderly  fashion. 

Control  Station  Inventory;  The  control  station  record  verification  is 
accamplished  on  the  402  EAM  by  comparing  the  accountable  copies  represented 
by  Destruction  and  Transmittal  Summary  cards,  and  Detail  Cards,  with  the  copy 
count  on  the  Master  Summary  card.  The  402  is  programmed  to  re^  the  copy 
count  in  the  Master  Summary  card  as  a  minus  value  in  the  counter.  Added  to 
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this  minus  value  are  the  copy  counts  on  the  Destruction  and  Transmittal 
Summary  cards,  and  each  Detail  Card  remaining  in  the  record  deck.  Tlie  re¬ 
sult  is  indicated  as  a  deficit  If  there  are  not  enough  cards,  a  credit  if 
there  are  too  many  cards,  and  a  balance  if  the  totals  are  equal.  Simulta¬ 
neously,  a  listing  (Figure  7)  is  printed  showing  the  current  location  code 
on  each  Detail  Card  not  accounted  for  by  the  Destruction  and  Transmittal 
Summary  cai"ds.  A.  zero  balance  on  the  printout  verifies  the  completeness  of 
the  record. 

BIN  card  entries  are  verified  by  sighting  the  actual  document  copy  in 
the  control  station  files,  and  code  2  cards  are  matched  against  the  signed 
Eand-Receipt  cards  upon  completion  of  the  control  station  and  personal 
inventories. 

One  percent  of  the  total  record  is  verified  eeich  day.  In  that  way, 
positive  record  verification  occurs  twice  a  year. 

CLASSIFICATION  REGRADIMG 


Since  distribution  and  destruction  records  are  not  required  for  Confi¬ 
dential  or  unclassified  material,  the  Record  Deck  is  immediately  removed 
from  file  upon  downgrading  of  the  document.  An  accounting  of  all  copies 
is  made  and  regrading  notices  are  sent  to  all  holders  in  and  out  of  the 
facility.  The  Master  Summary  card  is  corrected  to  show  the  regrading 
action  by  over-punching  the  time-phased  groiQ)  assignment  number  (or  dupli¬ 
cating  the  card  entirely)  to  read: 


"C"  —  Group  3  docxmient  regraded  to  Confidential 
"D"  — -  Group  4  document  regraded  to  Confidential 
"E"  Group  4  document  regraded  to  Unclassified 
"p"  — -  Declassified  by  special  review 
"G"  -•••>  Regraded  to  Confidential  by  special  review 


CONCLUSION 

Over  the  past  l4  months  the  system  has  been  proved  to  be  most  effective. 
Each  day,  over  6OO  new  Detail  Cards  are  generated  and  approximately  2000 
transactions  are  recorded  with  an  average  expenditure  of  24  man-hours. 


Loss  of  control  for  one  dcctunent  copy  has  resulted  from  a  misplaced  or 
missing  Detail  Card.  Recording  discrepancies,  often  occurring  In  the  old 
manual  system  by  posting  distribution  information  from  destruction  certifi¬ 
cates  and  transmittal  receipts,  have  been  eliminated  by  the  new  machine- 
based  system.  Now,  the  record  (Detail  Cards)  actually  produces  the  destruc¬ 
tion  certificate  and  transmittal  receipt. 


An  unexpected  by-product  of  the  system  has  been  a  drastically  Increased 
confidence  in  the  control  station  on  the  part  of  employees  using  classified 
ma.tenl.al. 
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Cols  1  thru  7 
^'ter  '^SUMMARY" 

Col  39 

Automatic,  Tline>phased  Downgrading  and  Declasalflcatlon  System 
group  number. 

Col  40 

''1*'  Indicates  the  old  document  numbering  system;  "2"  Indicates 
the  new  system. 

Cols  4l  thru 

Contract  under  which  the  document  was  written 


Cols  46  thru  51 
Document  publication  data 

Cola  thru  67 
Document  series  and  number 


Col  68 

Classification  code 
Cola  77  thru  80 

Total  number  of  accountable  oopiea  (highest  copy  numbei*  assigned). 
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FIGURE  1.  MASTER  SUM^WRX  CARD 
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©  Cols  1  thru  9 

SDC  field  location  code  or  a.  Publication  Information  Register  number 
Identifing  the  addressee  when  sent  outside  the  facility.  All  other 
addressees  (lean  than  5y^)  are  identified  as  "MM"  (Mlsc.  Military)  or 
"MC"  (Misc,  Civilian). 

CD  Cols  13  and  l4 

Identll'les  the  type  of  issue  or  transmittal.  "OG"  indicates 
"OutGoing"  from  the  facility  and  "MN"  indicates  a  Man  (employee) 

Number  when  issued  within  the  facility. 

CD 

Outgoing  ("00'^  control  number  assigned  to  the  transmittal.  Employee 
number  ("MN")  to  whom  issued. 
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